HP 830 Series Configuration Manual page 20

Step
3. Specify the scheme
authentication mode.
4. Return to system view.
5. Configure the
authentication mode for
SSH users as password.
6. Configure the user
privilege level through the
AAA module.
For example:
# Configure the device to use local authentication for Telnet users on VTY 1.
<Sysname> system-view
[Sysname] user-interface vty 1
[Sysname-ui-vty1] authentication-mode scheme
[Sysname-ui-vty1] quit
[Sysname] local-user test
[Sysname-luser-test] password simple 123
[Sysname-luser-test] service-type telnet
When users Telnet to the device through VTY 1, they must enter username test and password 123. After
passing the authentication, the users can only use level-0 commands.
# Assign commands of levels 0 through 3 to the users.
[Sysname-luser-test] authorization-attribute level 3
Configuring the user privilege level directly on a user interface
To configure the user privilege level directly on a user interface that uses the scheme authentication mode:
Step
1. Configure the authentication
type for SSH users as
publickey.
2. Enter system view.
Command
authentication-mode scheme
quit
For more information, see Security
Configuration Guide.
•
To use local authentication:
Use the local-user command
a.
to create a local user and
enter local user view.
b. Use the level keyword in the
authorization-attribute
command to configure the
user privilege level.
•
To use remote authentication
(RADIUS, HWTACACS, or LDAP):
Configure the user privilege level
on the authentication server.
Command
For more information, see Security
Configuration Guide.
system-view
14
Remarks
By default, the authentication
mode for VTY and AUX users is
password, and no authentication is
required for console login users.
N/A
This step is required only for SSH
users who must provide their
usernames and passwords for
authentication.
User either approach.
For local authentication, if you do
not configure the user privilege
level, the user privilege level is 0.
For remote authentication, if you
do not configure the user privilege
level, the user privilege level
depends on the default
configuration of the authentication
server.
For more information about the
local-user and
authorization-attribute commands,
see Security Command Reference.
Remarks
Required only for SSH users who
use public-key authentication.
N/A